Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: TYymhj2rFDM3eX/4yV7TAW3+7jdlVKf+EJMOlHGcsdY=
Subject key identifier: D5:88:5A:87:6E:9B:43:D9:0F:5B:F1:09:B4:F8:CC:CA:D2:15:A9:FD
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 01968322B6908EBA7D1B7F1B19C8498B5FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0B57
Signing time: Tue 29 Apr 2025 20:00:12 +0000
Manifest this update: Tue 29 Apr 2025 20:00:12 +0000
Manifest next update: Wed 30 Apr 2025 20:00:12 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: kSaKPPG5Ke41JvkPwDkYRLUxKE5LWyTH9LZJ+0/0clM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:b6:90:8e:ba:7d:1b:7f:1b:19:c8:49:8b:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Apr 29 20:00:12 2025 GMT
Not After : Apr 30 20:00:12 2025 GMT
Subject: CN=d5885a876e9b43d90f5bf109b4f8cccad215a9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:42:8f:37:f1:17:1f:45:51:e9:1b:0a:6d:
ad:74:63:8d:37:cf:96:76:2c:3d:d3:c9:c5:17:dc:
c2:8b:36:56:1a:b9:10:59:f4:f8:08:90:ff:75:ad:
d7:3c:2e:f5:9f:46:01:c2:b7:d5:d3:11:c0:d3:b8:
d3:9c:80:10:6d:6b:96:70:f8:55:6d:68:7a:1a:31:
97:25:27:87:33:f5:9e:a4:1d:a4:13:e2:03:15:25:
0c:f4:d6:1b:f3:59:a3:29:6f:e4:7f:c1:b5:19:65:
a3:a3:bc:18:70:14:a6:b5:64:f6:1e:de:6f:ab:57:
25:4b:b7:9f:37:ec:17:f5:48:63:72:b9:89:cd:2d:
b7:e1:be:cb:1c:59:52:9e:78:28:6d:f2:39:4f:25:
fa:dd:9e:71:f7:cb:4e:7c:14:86:25:0b:f6:66:25:
6b:ee:d8:7e:fa:89:a1:7e:27:fb:76:ef:5d:5f:e9:
3c:6a:60:d5:42:8c:55:2c:09:d6:d3:38:40:fe:00:
8d:1e:f2:29:dd:64:2d:32:fb:90:ca:35:da:f1:43:
d4:af:97:fb:85:42:48:17:74:a0:cb:f5:7d:be:90:
d1:c6:a3:f7:79:a9:98:e0:15:bb:c6:35:bc:69:36:
60:93:72:92:98:36:36:10:cb:10:2d:17:02:7f:7d:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:5A:87:6E:9B:43:D9:0F:5B:F1:09:B4:F8:CC:CA:D2:15:A9:FD
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a2:54:98:00:1c:13:5f:f9:03:cb:ee:19:e5:1f:65:ed:46:
ba:71:25:59:66:ad:73:2f:63:f0:9c:b8:93:da:ac:f9:b2:48:
70:28:62:11:5e:8a:e5:9a:47:9f:0c:54:8c:78:33:a0:5b:23:
84:b9:5b:75:4f:22:af:2c:b8:9b:ba:4d:ef:cd:2d:8c:3a:05:
de:92:a1:f3:8b:49:71:ea:cd:0d:2e:01:ef:0c:cd:44:22:b8:
79:09:9c:35:3d:08:29:16:1a:24:a5:84:50:6c:ef:91:b0:6b:
13:c7:03:1a:60:d2:aa:1e:1c:c6:67:73:8f:be:e9:b1:f5:c9:
8a:a0:2a:d3:ba:59:fb:f5:fe:df:f4:73:16:85:1e:64:35:73:
9e:f4:26:77:f3:32:ac:f1:bd:71:62:21:40:c6:dd:51:19:ec:
e4:da:ca:c5:54:03:b6:a9:b7:44:84:a3:57:44:b5:09:c2:d2:
1c:46:d4:56:aa:0a:92:20:26:ed:bd:63:b0:d3:b2:ff:2d:03:
8e:50:f9:dc:9b:6c:64:40:c9:67:52:8c:50:f7:2c:a4:b3:9f:
74:10:a0:41:46:30:5e:b9:4f:e1:6a:8a:f8:47:3b:44:87:c2:
b5:b8:59:1a:83:44:b3:16:df:b3:57:1e:a1:4b:41:3b:16:6d:
8f:b1:d5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIraQjrp9G38bGchJi1+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh
MmE1MGYwHhcNMjUwNDI5MjAwMDEyWhcNMjUwNDMwMjAwMDEyWjAzMTEwLwYDVQQD
EyhkNTg4NWE4NzZlOWI0M2Q5MGY1YmYxMDliNGY4Y2NjYWQyMTVhOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYNCjzfxFx9FUekbCm2tdGONN8+W
diw908nFF9zCizZWGrkQWfT4CJD/da3XPC71n0YBwrfV0xHA07jTnIAQbWuWcPhV
bWh6GjGXJSeHM/WepB2kE+IDFSUM9NYb81mjKW/kf8G1GWWjo7wYcBSmtWT2Ht5v
q1clS7efN+wX9UhjcrmJzS234b7LHFlSnngobfI5TyX63Z5x98tOfBSGJQv2ZiVr
7th++omhfif7du9dX+k8amDVQoxVLAnW0zhA/gCNHvIp3WQtMvuQyjXa8UPUr5f7
hUJIF3Sgy/V9vpDRxqP3eamY4BW7xjW8aTZgk3KSmDY2EMsQLRcCf32lywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWIWodum0PZD1vxCbT4zMrSFan9MB8GA1UdIwQY
MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt
ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm
LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqJUmAAc
E1/5A8vuGeUfZe1GunElWWatcy9j8Jy4k9qs+bJIcChiEV6K5ZpHnwxUjHgzoFsj
hLlbdU8iryy4m7pN780tjDoF3pKh84tJcerNDS4B7wzNRCK4eQmcNT0IKRYaJKWE
UGzvkbBrE8cDGmDSqh4cxmdzj77psfXJiqAq07pZ+/X+3/RzFoUeZDVznvQmd/My
rPG9cWIhQMbdURns5NrKxVQDtqm3RISjV0S1CcLSHEbUVqoKkiAm7b1jsNOy/y0D
jlD53JtsZEDJZ1KMUPcspLOfdBCgQUYwXrlP4WqK+Ec7RIfCtbhZGoNEsxbfs1ce
oUtBOxZtj7HVjA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:35:20 2025 by rpki-client